CVE-2023-3497: Out of bounds read in Titan C firmwareFound internally by Google
Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. (Chromium security severity: Medium)
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-3497?
The severity of CVE-2023-3497 is medium.
How can a local attacker exploit CVE-2023-3497?
A local attacker can exploit CVE-2023-3497 by physically accessing the device to perform a denial of service attack.
Which versions of Google Chrome on Chrome OS are affected by CVE-2023-3497?
Versions prior to 114.0.5735.90 of Google Chrome on Chrome OS are affected by CVE-2023-3497.
Is Google Chrome OS vulnerable to CVE-2023-3497?
No, Google Chrome OS is not vulnerable to CVE-2023-3497.
Where can I find more information about CVE-2023-3497?
You can find more information about CVE-2023-3497 at the following references: [Google Chrome Releases Blog](https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-chromeos.html) and [Chromium Bug Tracker](https://crbug.com/1459277).